Free Juniper JN0-232 Practice Test Questions

Question 1

You are asked to reduce security configuration complexity on your external facing firewalls. You notice that a previous administrator included hundreds of private subnet NAT rules covering various RFC1918 addresses. You want to replace all these rules with a single rule covering all RFC1918 addresses. Which rule would you use in this scenario?

A : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12]

B : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.16.0.0/12 172.168.0.0/16]

C : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 172.168.0.0/16 192.0.2.0/24 203.1.113.0/24]

D : set security nat source rule-set private-to-pub rule RFC1918 match source-address [10.0.0.0/8 192.168.0.0/16 172.16.0.0/12 192.0.2.0/24]

Answer: A

Question 2

You are asked to create a security policy that controls traffic allowed to pass between the Internet and private security zones. You must ensure that this policy is evaluated before all other policy types on your SRX Series device. In this scenario, which type of security policy should you create?

A : routing policy

B : default policy

C : zone policy

D : global policy

Answer: D

Question 3

You are asked to create a security policy that controls traffic allowed to pass between the Internet and private security zones. You must ensure that this policy is evaluated before all other policy types on your SRX Series device. In this scenario, which type of security policy should you create?

A : routing policy

B : default policy

C : zone policy

D : global policy

Answer: D

Question 4

You want to enable NextGen Web Filtering in SRX Series devices. In this scenario, which two actions will accomplish this task? (Choose two.)

A : Generate a CA-signed certificate.

B : Generate a self-signed certificate.

C : Configure an SSL initiation profile.

D : Configure an SSL proxy profile.

Answer: B,D

Question 5